Privacy Policy

What we collect

• Account data: name, email, hashed password, sign-in sessions (IP address and browser).
• Business data you enter: onboarding answers, blueprint progress, tasks, KPIs, budget items and team membership.
• Activity data: XP events, credit usage and the policy version you accepted, with the time, IP address and browser at acceptance.
• Payment data: Stripe processes card details. We only receive the purchase amount, credits and a Stripe reference.

How we use it

• To run your workspace, show progress, streaks and leaderboards, and keep your account secure.
• To power AI features you choose to use.
• To send essential account emails (verification and password reset). We do not sell your data or use it for advertising.

AI processing

When you chat with Eugene or generate drafts, we send the relevant business context (business name, stage, goals, blueprint progress, open tasks, KPIs and your message) to Google Gemini (Google LLC) to generate a response. We do not send your password or payment details. Business owners can disable AI processing for their workspace in Business settings; when disabled, no workspace data is sent to the AI provider.

Who we share it with

• Vercel (hosting) and Neon (database), which store data on our behalf.
• Google Gemini (Google LLC), only for AI requests as described above.
• Stripe, for payments.
• Our email provider, to deliver account emails.
• Other members of a business you belong to can see your name, role, tasks assigned to you and leaderboard XP in that business.

Retention and deletion

• Deleting a business permanently removes its blueprint, tasks, KPIs, budget, team memberships and XP.
• Deleting your account removes your profile, sessions, memberships and XP. You must first delete businesses you own.
• Records of paid credit purchases are kept for accounting with personal links removed. Consent records are kept as proof of acceptance with the account link removed.

Your rights

You can view and edit your data in the app, download a copy from Account settings, and delete your account at any time. For other requests, including access, correction or objection, email support@bisi.app.

Security

Data is encrypted in transit and at rest by our providers. Passwords are hashed. Workspace data is scoped so members can only reach businesses they belong to. The installable app never stores your workspace pages offline.